In the Claims : 

Please amend claims 1-5, 13-23, 27, 28, 32 and 35-63 as indicated below. 

1. (Currently amended) A network management system, comprising: 

a gateway which is coupled to a plurality of managed objects and which is 
configured to deliver one or more events generated by the managed 
objects to one or more managers or to deliver one or more requests 
generated by the one or more managers to one or more of the managed 
objects; and 

a platform-independent interface to the gateway, wherein the gateway is 
configurable to communicate with the one or more managers through the 
platform-independent interface to deliver the one or more events or the 
one or more requests; 

wherein the gateway is configurable to provide object-level access control 
between the one or more managers and the managed objects to receive the 
one or more events from or to send the one or more requests to the 
managed objects, wherein said object-level access control is provided at 
the an individual object level so that one of the one or more managers is 
granted access to one of the managed objects while being prevented from 
interfacing with a different one of the managed objects. 

2. (Currently amended) The network management system of claim 1, wherein 
the gateway is configurable to determine whether each of the one or more managers is 
authorized to communicate with each of the managed objects. 

3. (Currently amended) The network management system of claim 1, wherein 
the gateway is configurable to authenticate the one or more managers to receive the one 
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or more events from or to send the one or more requests to the managed objects as a 
function of the identity of the managed object. 



4. (Currently amended) The network management system of claim 1, wherein 
the gateway is configurable to authenticate the one or more managers to receive the one 
or more events or send the one or more requests as a function of user IDs entered by users 
of the one or more managers. 

5. (Currently amended) The network management system of claim 1, wherein 
the one or more events or one or more requests are delivered by the gateway through the 
platform-independent interface according to Internet Inter-Object Protocol (HOP). 

6. (Original) The network management system of claim 1, wherein the platform- 
independent interface to the gateway is expressed in an interface definition language, and 
wherein the interface definition language comprises a language for defining interfaces to 
the managed objects across a plurality of platforms and across a plurality of programming 
languages. 

7. (Original) The network management system of claim 6, wherein the interface 
definition language comprises OMG IDL. 

8. (Original) The network management system of claim 1, wherein the managed 
objects comprise one or more objects corresponding to a telephone network. 

9. (Original) The network management system of claim 1, wherein the managed 
objects comprise an object corresponding to a telecommunications device. 

10. (Original) The network management system of claim 1, wherein the gateway 
is configurable to provide security audit trails. 

11. (Original) The network management system of claim 10, wherein the 
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gateway providing security audit trails comprises the gateway providing access to a 
logging service. 

12. (Previously presented) The network management system of claim 11, 
wherein the logging service is operable to log an ED of a user that receives each event or 
sends each request. 

13. (Currently amended) The network management system of claim 1 1, wherein 
the logging service is operable to log an ID of the a respective one of the plurality of 
managed objects that is the a source of each event or the a target of each request. 

14. (Previously presented) The network management system of claim 11, 
wherein the logging service is operable to log a time at which each event or request is 
generated. 

15. (Previously presented) The network management system of claim 11, 
wherein the logging service is operable to log a time at which each event or request is 
delivered. 

16. (Currently amended) The network management system of claim 1, wherein 
the one or more requests comprise a query for information concerning one of the 
managed objects. 

17. (Currently amended) The network management system of claim 1, wherein 
the one or more requests comprise a command to set one or more parameters of one of 
the managed objects. 

18. (Currently amended) The network management system of claim [[!]] 6, 
wherein the one or more requests are converted from the interface definition language to 
a Portable Management Interface (PMI) format prior to delivery to the managed objects. 
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19. (Currently amended) The network management system of claim [[1]] 6, 
wherein the one or more requests are converted from the interface definition language to 
a platform-specific format prior to delivery to the managed objects. 

20. (Currently amended) A network management method, comprising: 

sending an identity of a user of a manager application to a gateway, wherein the 
gateway is configurable to communicate with the manager application 
through a platform-independent interface; 

determining on a managed object level whether or not the manager application is 
allowed to receive an event generated by one of a plurality of managed 
objects or to send a request to the one of the plurality of managed objects 
as a function of the identity of the user of the manager application, 
whereby access for the manager application to receive the event or send 
the request is approved or denied for said one of the plurality of managed 
objects at the an individual object level so that the manager application is 
granted access to one of the plurality of managed objects while being 
prevented from interfacing with a different one of the plurality of managed 
objects; and 

delivering the event to the manager application or the request to the managed 
object if the manager access is approved. 

21. (Currently amended) The network management method of claim 20, wherein 
the gateway is configurable to determine whether the manager application is authorized 
to communicate with the one of the plurality of managed objects. 

22. (Currently amended) The network management method of claim 20, wherein 
the gateway is configurable to authenticate the manager application to receive the event 
or send the request as a function as the identity of the managed object generating the 
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event or receiving the request. 



23. (Currently amended) The network management method of claim 20, wherein 
the gateway is configurable to authenticate the manager application to receive the event 
or send the request as a function of a user ED entered by the user of the manager 
application . 

24. (Original) The network management method of claim 20, wherein the event 
or request is delivered by the gateway through the platform-independent interface 
according to Internet Inter-Object Protocol (HOP). 

25. (Original) The network management method of claim 20, wherein the 
platform-independent interface to the gateway is expressed in an interface definition 
language, and wherein the interface definition language comprises a language for 
defining interfaces to the managed objects across a plurality of platforms and across a 
plurality of programming languages. 

26. (Original) The network management method of claim 25, wherein the 
interface definition language comprises OMG EDL. 

27. (Currently amended) The network management method of claim 20, wherein 
the one of the plurality of managed objects comprises an object corresponding to a 
telephone network. 

28. (Currently amended) The network management method of claim 20, wherein 
the one of the plurality of managed objects comprises an object corresponding to a 
telecommunications device. 

29. (Original) The network management method of claim 20, wherein the 
gateway is configurable to provide security audit trails. 
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30. (Original) The network management method of claim 29, wherein the 
gateway providing security audit trails comprises the gateway providing access to a 
logging service. 

31. (Original) The network management method of claim 30, wherein the 
logging service is operable to log an ID of a user that receives the event or sends the 
request. 

32. (Currently amended) The network management method of claim 30, wherein 
the logging service is operable to log an ID of the respective one of the plurality of 
managed objects that is the a source of the event or the a target of the request. 

33. (Original) The network management method of claim 30, wherein the 
logging service is operable to log a time at which the event or request is generated. 

34. (Original) The network management method of claim 30, wherein the 
logging service is operable to log a time at which the event or request is delivered. 

35. (Currently amended) The network management method of claim 20, wherein 
the request comprises a query for information concerning the one of the plurality of 
managed objects. 

36. (Currently amended) The network management method of claim 20, wherein 
the request comprises a command to set one or more parameters of the one of the 
plurality of managed objects. 

37. (Currently amended) The network management method of claim [[20]] 25, 
wherein the request is converted from the interface definition language to a Portable 
Management Interface (PMI) format prior to delivery to the one of the plurality of 
managed objects. 



09/556,068 (5181-48400/P4500) 



7 



Meyertons, Hood, Kivlin, Kowert & Goetzel, P.C. 



38. (Currently amended) The network management method of claim [[20]] 25, 
wherein the request is converted from the interface definition language to a platform- 
specific format prior to delivery to the one of the plurality of managed objects. 

39. (Currently amended) A eame^ tangible, computer accessible storage medium 
comprising program instructions for network management, wherein the program 
instructions are computer-executable to perform: 

sending an identity of a user of a manager application to a gateway, wherein the 
gateway is configurable to communicate with the manager application 
through a platform-independent interface;. 

determining on a managed object level whether or not the manager application is 
allowed to receive an event generated by, one of a plurality of managed 
objects or to send a request to the one of the plurality of managed objects 
as a function of the identity of the user of the manager application, 
whereby access for the manager application to receive the event or send 
the request is approved or denied for said one of the plurality of managed 
objects at the an individual object level so that the manager application is 
granted access to one of the plurality of managed objects while being 
prevented from interfacing with a different one of the plurality of managed 
objects; and 

delivering the event to the manager application or the request to the managed 
object if the manager access is approved. 

40. (Currently amended) The carrier tangible, computer accessible storage 
medium of claim 39, wherein the gateway is configurable to determine whether the 
manager application is authorized to communicate with the one of the plurality of 
managed objects. 
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41. (Currently amended) The eame^ tangible. computer accessible storage 
medium of claim 39, wherein the gateway is configurable to authenticate the manager 
a pplication to receive the event or send the request as a function as the identity of the 
managed object generating the event or receiving the request. 

-42. (Currently amended) The eameg^ tangible. computer accessible storage 
medium of claim 39, wherein the gateway is configurable to authenticate the manager 
application to receive the event or send the request as a function of a user ID entered by 
the user of the manager application . 

43. (Currently amended) The earner- tangible, computer accessible storage 
medium of claim 39, wherein the event or request is delivered by the gateway through the 
platform-independent interface according to Internet Inter-Object Protocol (HOP). 

44. (Currently amended) The carri e r tangible, computer accessible storage 
medium of claim 39, wherein the platform-independent interface to the gateway is 
expressed in an interface definition language, and wherein the interface definition 
language comprises a language for defining interfaces to the managed objects across a 
plurality of platforms and across a plurality of programming languages. 

45. (Currently amended) The earria Mangible. computer accessible storage 
medium of claim 44, wherein the interface definition language comprises OMG IDL. 

46. (Currently amended) The eamef Mangible. computer accessible storage 
medium of claim 39, wherein the one of the plurality of managed objects comprises an 
object corresponding to a telephone network. 

47. (Currently amended) The earner- tangible, computer accessible storage 
medium of claim 39, wherein the one of the plurality of managed objects comprises an 
object corresponding to a telecommunications device. 
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48. (Currently amended) The earner- tangible, computer accessible storage 
medium of claim 39, wherein the gateway is configurable to provide security audit trails. 

r 

49. (Currently amended) The earner- tangible, computer accessible storage 
medium of claim 48, wherein the gateway providing security audit trails comprises the 
gateway providing access to a logging service. 

50. (Currently amended) The earriei ^tangible, computer accessible storage 
medium of claim 49, wherein the logging service is operable to log an ID of a user that 
receives the event or sends the request. 

51. (Currently amended) The earner -tangible, computer accessible storage 
medium of claim 49, wherein the logging service is operable to log an ED of the 
respective one of the plurality of managed objects that is the a source of the event or the a 
target of the request. 

52. (Currently amended) The eame ^tangible, computer accessible storage 
medium of claim 49, wherein the logging service is operable to log a time at which the 
event or request is generated. 

53. (Currently amended) The earner -tangible, computer accessible storage 
medium of claim 49, wherein the logging service is operable to log a time at which the 
event or request is delivered. 

54. (Currently amended) The eamet Mangible. computer accessible storage 
medium of claim 39, wherein the request comprises a query for information concerning 
the one of the plurality of managed objects. 

55. (Currently amended) The eamei Mangible, computer accessible storage 
medium of claim 39, wherein the request comprises a command to set one or more 
parameters of the one of the plurality of managed objects. 
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56. (Currently amended) The eame^ tangible, computer accessible storage 
medium of claim [[39]] 44, wherein the request is converted from the interface definition 
language to a Portable Management Interface (PMI) format prior to delivery to the one of 
the plurality of managed objects. 

57. (Currently amended) The earrie^ tangible, computer accessible storage 
medium of claim [[39]] 44, wherein the request is converted from the interface definition 
language to a platform-specific format prior to delivery to the managed object. 

58. (Currently amended) A network management system, comprising: 

a gateway which is coupled to a plurality of managed objects and which is 
configured to deliver one or more events generated by the managed 
objects to one or more managers or to deliver one or more requests 
generated by the one or more managers to one or more of the managed 
objects; and 

a platform-independent interface to the gateway, wherein the gateway is 
configurable to communicate with the one or more managers through the 
platform-independent interface to deliver the one or more events or the 
one or more requests ; 

wherein the gateway is configurable to provide object-level access control 
between the one or more managers and the managed objects to receive the 
one or more events from or to send the one or more requests to the 
managed objects, wherein said object-level access control is provided at 
the an individual object level so that one of the one or more managers is 
granted access to one of the managed objects while being prevented from 
interfacing with a different one of the managed objects, and wherein the 



09/556,068 (5181-48400/P4500) 



11 



Meyertons, Hood, Kivlin, Kowert & Goetzel, P.C 



managers use a request Service Access Point (SAP) for requests and 
responses. 



59. (Currently amended) A network management method, comprising: 

sending an identity of a user of a manager application to a gateway, wherein the 
gateway is configurable to communicate with the manager application 
through a platform-independent interface; 

determining on a managed object level whether or not the manager application is 
allowed to receive an event generated by one of a plurality of managed 
objects or to send a request to the one of the plurality of managed objects 
as a function of the identity of the user of the manager application, 
whereby access for the manager application to receive the event or send 
the request is approved or denied for said one of the plurality of managed 
objects at the an individual object level so that the manager application is 
granted access to one of the plurality of managed objects while being 
prevented from interfacing with a different one of the plurality of managed 
objects; and 

delivering the event to the manager application or the. request to the managed 
object if the manager access is approved; 

wherein the manager application uses a request Service Access Point (SAP) for 
requests and responses. 

60. (Currently amended) A earner- tangible, computer accessible storage 
medium, comprising program instructions for network management, wherein the program 
instructions are computer-executable to perform: 
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sending an identity of a user of a manager application to a gateway, wherein the 
gateway is configurable to communicate with the manager application 
through a platform-independent interface; 



determining on a managed object level whether or not the manager application is 
allowed to receive an event generated by one of a plurality of managed 
objects or to send a request to the one of the plurality of managed objects 
as a function of the identity of the user of the manager application, 
whereby access for the manager application to receive the event or send 
the request is approved or denied for said one of the plurality of managed 
objects at the an individual object level so that the manager application is 
granted access to one of the plurality of managed objects while being 
prevented from interfacing with a different one of the plurality of managed 
objects; and 

delivering the event to the manager application or the request to the managed 
object if the manager access is approved; 

wherein the manager application uses a request Service Access Point (SAP) for 
requests and responses. 

61. (Currently amended) A network management system, comprising: 

a gateway which is coupled te- betweeri a plurality of managed objects and a 
plurality of proxy agent managers; and which is configured to deliver one 
or more events generated by the managed objects to one or more managers 
or and to deliver one or more requests generated by the managers to one or 
more of the managed objects , wherein each of the events and each of the 
requests include a user identification, wherein the user identification 
identifies the respective manager to which the event or the request 
belongs ; 
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a platform-independent interface to the gateway, wherein the gateway is 
configurable to communicate with the one or more managers through the 
platform-independent interface to deliver the one or more events or the 
one or more requests , wherein the managers share a singleton Request 
Service Access Point (Request SAP) object ; 

wherein the gateway is configurable to provide object-level access control 
between the one or more managers and the managed objects to receive the 
one or more events from or to send the one or more requests to the 
managed objects, wherein said object-level access control is provided by 
the Request SAP object at the an individual object level so that one of the 
one or more managers is granted access to one of the managed objects 
while being prevented from interfacing with a different one of the 
managed objects^-aftd 

wherein the gat e way uses a singleton SAP object that shar e s all ProxyAgents 
through which a manager deals with a manag e d object and allows th e 
insertion of the user name in th e request message to enforc e obj e ct - l e v e l 
access control . 

62. (Currently amended) A network management method, comprising: 

sending an identity of a user of a manager application to a gateway, wherein the 
gateway is configurable to communicate with the manager application 
through a platform-independent interface , wherein the gateway is coupled 
between a plurality of managed objects and the manager application ; 

determining on a managed object level whether or not the manager application is 
allowed to receive an event generated by one of a plurality of managed 
objects or to send a request to the one of the plurality of managed objects 
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as a function of the identity of the user of the manager application, 
wherein the event and the request include a user identification, wherein the 
user identification identifies the manager application to which the event or 
the request belongs; 

whereby access for the manager application to receive the event or send the 
request is approved or denied for said one of the plurality of managed 
objects bv a singleton Request Service Access Point (Request SAP) at the 
an individual object level so that the manager application is granted access 
to one of the plurality of managed objects while being prevented from 
interfacing with a different one of the plurality of managed objects; and 

delivering the event to the manager application or the request to the managed 
object if the manager access is appro vedy-and 

wherein the gateway uses a singleton SAP object that shares all ProxyAgents 
through which the manager deals with a managed obj e ct and allows the 
insertion of the us e r name in th e requ e st messag e to enforc e obj e ct l e v e l 
access control . 

63. (Currently amended) A eame ^tangible. computer accessible storage 
medium, comprising program instructions for network management, wherein the program 
instructions are computer-executable to perform: 

sending an identity of a user of a manager application to a gateway, wherein the 
gateway is configurable to communicate with the manager application 
through a platform-independent interface , wherein the gateway is coupled 
between a plurality of managed objects and the manager application ; 

determining on a managed object level whether or not the manager application is 
allowed to receive an event generated by one of a plurality of managed 
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objects or to send a request to the one of the plurality of managed objects 
as a function of the identity of the user of the manager application, 
wherein the event and the request include a user identification, wherein the 
user identification identifies the manager application to which the event or 
the request belongs; 

whereby access for the manager application to receive the event or send the 
request is approved or denied for said one of the plurality of managed 
objects bv a singleton Request Service Access Point (Request SAP) at the 
an individual object level so that the manager application is granted access 
to one of the plurality of managed objects while being prevented from 
interfacing with a different one of the plurality of managed objects; and 

delivering the event to the manager application or the request to the managed 
object if the manager access is appro vedt-and 

wherein the gateway us e s a singleton SAP object that shar e s all ProxyAg e nts 
through which th e manager d e als with a managed object and allows th e 
insertion of th e us e r name in the request message to enforce object lev e l 
access control . 



09/556,068 (5181-48400/P4500) 



16 



Meyertons, Hood, Kivlin, Kowert & Goetzel, P.C. 



